Principal members hold a direct contractual relationship with the card scheme, own their BIN ranges, and bear full settlement and compliance responsibility. Affiliate members – also called associate members – operate under a principal member’s umbrella, accessing the scheme through that principal’s BIN without holding a direct scheme relationship themselves. The distinction defines the compliance hierarchy, the settlement chain, and ultimately who is accountable to Visa or Mastercard for every transaction on a programme.

On this page:

• What can a principal member do that an affiliate member cannot?
• What are the eligibility requirements for principal membership?
• What does it cost to become a principal member?
• Who holds settlement responsibility in each membership model?
• Can an affiliate member sponsor other businesses?
• What is the difference between affiliate and associate membership?
• How does membership type affect the programmes built on top of it?
• When does it make sense to move from affiliate to principal membership?

Answer

A principal member can own BINs, settle transactions directly with the scheme, sponsor other businesses as affiliate members, and acquire merchants. An affiliate member can issue cards and process transactions, but cannot own BINs, cannot settle directly with the scheme, and cannot sponsor other businesses to issue cards.

The principal member’s position in the hierarchy

Principal members sit at the top of the card scheme membership hierarchy. They hold a direct contractual relationship with Visa or Mastercard, are assigned BIN ranges by the scheme, and are directly accountable to the scheme for compliance across all cards and transactions associated with their BINs. That accountability extends to any affiliate members operating under their sponsorship – a principal member is responsible for the conduct of the programmes it sponsors.

This means principal members carry both significant operational capability and significant liability. They can build and run card programmes at scale without depending on any other institution. They can also generate revenue by sponsoring others. But they bear the full weight of scheme compliance, settlement exposure, and scheme fees directly.

What affiliate members can and cannot do

Affiliate members – registered with the scheme under a principal member’s sponsorship – can issue branded payment cards and process cardholder transactions. They have a scheme registration, which is real and meaningful: their programmes are recognised by the scheme and transactions flow legitimately through the network.

What they cannot do is operate independently of their sponsor. They cannot settle directly with the scheme – settlement flows through the principal member. They cannot hold BINs in their own name. They cannot sponsor other businesses. And if their principal sponsor ceases to operate or terminates the relationship, their card programme ceases with it until a new sponsor is found.

What to watch for

• When evaluating a BIN sponsor, confirm they hold principal membership – not affiliate or associate membership – of the relevant scheme. An affiliate cannot legitimately sponsor other businesses to issue cards under a BIN it does not own.
• Some consultancies and intermediaries position themselves as programme managers without clarifying their actual scheme membership status. Always ask to see the scheme membership confirmation directly.

Answer

To become a principal member of Visa or Mastercard in Europe, a business must hold a regulatory licence – either an Electronic Money Institution (EMI) licence or a banking licence – issued by a recognised European financial regulator. The scheme will also assess the applicant’s financial standing, operational infrastructure, compliance framework, and the viability of the proposed programme.

The regulatory prerequisite

A Payment Institution (PI) or Electronic Money Institution (EMI) licence is a prerequisite for any card scheme principal membership application in Europe. The FCA in the UK and the Bank of Lithuania are the two most commonly used licensing authorities for European card programme operators. Obtaining the licence typically takes 12 to 18 months on its own, before scheme membership applications begin.

What the schemes assess

Unlike a financial regulator, the card schemes take a product-first approach to membership applications. They want to understand what the business does, how it will use scheme membership, and whether the risks it introduces are acceptable to the network. The application requires detailed documentation covering:

• Business model and proposed programme design
• Financial statements and capital adequacy
• Compliance framework including AML, KYC and fraud controls
• Technical infrastructure for card issuing and transaction processing
• Settlement and liquidity capability
• Governance and key personnel

Applications are not purely pass/fail assessments – they involve ongoing dialogue with the scheme’s membership team. Knowing how to position the application and how to respond to queries materially affects both the outcome and the timeline.

What to watch for

• Scheme membership applications run in parallel to, not instead of, regulatory licensing. Both are required and both take time. Plan for a combined timeline of 18 to 36 months from a standing start.
• The schemes have discretion in accepting members and can decline applications without detailed explanation. Prior scheme experience, a credible compliance track record, and a clearly defined programme are material to the outcome.
• Mastercard and Visa have different fee structures and, to some degree, different programme requirements. Most European card issuers pursue both, but the applications are separate and the timelines may differ.

Answer

Principal membership involves both one-time application and setup costs and ongoing annual fees. Total first-year costs for a UK or European project are typically in the low to mid six figures per scheme, with significant variation depending on programme type, geography, and whether the applicant is pursuing issuing, acquiring or both.

The cost components

Scheme costs for principal membership cover several categories. Application fees are payable at submission and are non-refundable regardless of outcome. BIN registration fees are paid when BINs are assigned. Ongoing membership fees are levied annually and are typically tiered by transaction volume. Settlement fees apply per transaction processed through the scheme’s network.

These are the direct scheme costs. The indirect costs – internal resource, technology build or integration, legal and compliance advisory, and the ongoing operational overhead of maintaining scheme compliance – typically exceed the direct scheme fees for most applicants.

Why Mastercard is generally less expensive than Visa in Europe

This is a well-documented pattern in the European market. Mastercard’s membership fee structure for European applicants is generally lower than Visa’s, particularly for issuers at lower transaction volumes. For businesses pursuing both, the gap in total first-year cost can be material. This difference narrows significantly at higher volumes where scheme incentive programmes and volume discounts become relevant.

What to watch for

• Published fee information from the schemes is limited. Budget figures from advisers who have recently completed membership applications are more reliable than public estimates, which date quickly.
• The cost of maintaining principal membership – ongoing fees, compliance resource, scheme audits, rule change implementation – often exceeds the initial setup cost within three to four years. Model the total cost of ownership, not just the entry cost.
• For most fintechs at early or mid-scale, the economics of BIN sponsorship remain more favourable than principal membership until transaction volumes and programme complexity justify the overhead of direct membership.

Answer

In a principal membership model, the principal member settles directly with the card scheme – they hold the settlement account with the scheme and bear the liquidity and counterparty risk of settlement. In an affiliate model, settlement flows through the principal member: the scheme settles with the principal, who then settles with the affiliate. The affiliate does not have a direct settlement relationship with the scheme.

Why settlement responsibility matters operationally

Settlement timing, settlement currency, and the handling of failed settlements are all governed by the principal member in an affiliate arrangement. The affiliate’s settlement terms are set by the programme agreement with the principal – they are not directly negotiable with the scheme. This means the affiliate is exposed not only to its own settlement performance but to the principal’s financial standing and operational reliability.

This is one of the most significant risk factors in choosing a BIN sponsor. A principal member that encounters financial difficulty – even temporarily – can create settlement delays or failures that cascade to all affiliated programmes running under its BINs, regardless of the individual affiliate’s own financial health.

Settlement currencies and multi-market implications

Principal members settle in the currencies supported by their scheme membership and their settlement banking arrangements. For programmes operating across multiple European markets, the principal’s settlement currency coverage directly determines what currencies the affiliate programme can support without additional FX conversion steps. A principal member with settlement capability in EUR, GBP, PLN, HUF and RON – as DiPocket provides – enables multi-currency programmes without the affiliate needing separate banking arrangements for each currency.

What to watch for

• Ask your prospective BIN sponsor for their settlement banking arrangements and which currencies they settle in directly. Settlement via FX conversion introduces additional cost and timing risk.
• Ask about the sponsor’s financial standing and capital adequacy. As an affiliate you are operationally exposed to their financial health in the settlement chain even though they are not your bank.
• Understand the settlement cycle your programme will operate on – T+1, T+2 or other – and how failures or disputes in the settlement chain are handled under the programme agreement.

Answer

No. Only principal members can sponsor other businesses as affiliate or associate members of a card scheme. An affiliate member does not own BINs and cannot grant access to a BIN it does not hold. Sub-sponsorship arrangements – where an affiliate purports to sponsor a third party – are not permitted under Visa or Mastercard’s rules.

Why this matters when evaluating infrastructure partners

The practical implication is straightforward: if you are evaluating a provider who claims to offer BIN sponsorship, that provider must be a principal member of the relevant scheme. An affiliate or associate member cannot legitimately act as a BIN sponsor regardless of how the commercial arrangement is described.

This is not a technicality – it is a scheme rule violation that can result in the termination of all programmes running under the relevant BIN. Due diligence on a prospective sponsor should confirm their principal membership status directly with the scheme’s member directory, not just from the provider’s own documentation.

What to watch for

• Verify principal membership status directly through Visa’s or Mastercard’s member directories. These are accessible to businesses evaluating scheme participants and are more reliable than self-reported membership claims.
• Be cautious about arrangements described as ‘programme management’ or ‘card issuing facilitation’ without explicit confirmation of the underlying principal membership that makes card issuance possible.

Answer

The terminology varies between Visa and Mastercard. Visa uses ‘affiliate member’ and Mastercard uses ‘associate member’ to describe the same structural position: a business that issues cards under a principal member’s BIN, with a scheme registration but without a direct scheme contract. For practical purposes, affiliate and associate membership in a card scheme context are the same thing.

Why the terminology is inconsistent

Visa and Mastercard developed their membership frameworks independently and use different terminology throughout their rules and documentation. This creates terminology confusion in commercial discussions, particularly in multi-scheme programmes where a business may be described as a Visa affiliate and a Mastercard associate simultaneously, despite holding structurally identical positions in each network.

Some advisers and providers use ‘associate member’ as a generic term covering any non-principal participant, including those with more limited access than a full affiliate. In scheme documentation, the specific capabilities and obligations attached to each membership tier are what matter – the label alone does not determine what a member can do.

Membership terminology across schemes at a glance

What to watch for

• When reviewing a programme agreement or scheme documentation, do not assume the same term means the same thing across Visa and Mastercard materials. Check the specific capabilities and obligations defined for the membership tier in each scheme’s rules.

Answer

A principal member’s scheme membership scope – which schemes, which geographies, which card types – sets the ceiling for every affiliate programme running under it. An affiliate cannot operate in a market the principal is not authorised for, cannot issue on a scheme the principal is not a member of, and cannot access card products or programme features the principal has not enabled within their own membership.

Geographic reach

A principal member’s scheme membership is granted for specific geographies. In Europe, a principal member authorised in one EEA jurisdiction can typically passport their scheme membership across EEA markets, but this requires the regulatory authorisation to operate in those markets as well as the scheme membership itself. For an affiliate, the operational footprint is bounded by wherever the principal can legitimately operate.

This is why a principal member’s European footprint – not just their membership status – is a meaningful evaluation criterion. A sponsor with Visa and Mastercard principal membership but regulatory authorisation only in one jurisdiction cannot legitimately support a multi-market programme in the same way that a dual-regulated sponsor with established operations across 15 markets can.

Scheme and card product access

Not all principal members hold membership of both Visa and Mastercard. A principal that is a Visa member only cannot sponsor a Mastercard programme, and vice versa. For businesses that want the flexibility to issue on either scheme – or to run both Visa and Mastercard programmes simultaneously – dual membership of the sponsor is a prerequisite, not a preference.

Similarly, access to specific card product types – virtual cards, tokenised cards for mobile wallets, commercial card products, prepaid – depends on the principal member having those features enabled within their own membership. An affiliate cannot access programme features the principal has not activated.

What to watch for

• Confirm your prospective sponsor holds principal membership of both Visa and Mastercard if you want programme flexibility or dual-scheme issuance. Single-scheme membership limits your options at launch and reduces leverage if commercial terms with one scheme change.
• Ask specifically about tokenisation support (Apple Pay, Google Pay compatibility) – this requires the principal to have activated token service provider arrangements within their membership. It is not automatically available.
• For multi-market programmes, ask the sponsor to confirm their regulatory authorisation on a market-by-market basis, not just their scheme membership. The two are independent requirements and gaps in either will prevent launch in that market.

Answer

Moving from affiliate to principal membership makes sense when the cost of ongoing BIN sponsorship fees exceeds the cost of running direct membership at your transaction volume, when you need programme features or geographies your current sponsor cannot provide, when your risk profile requires the independence of owning your own BINs, or when you want the ability to sponsor other businesses yourself.

The economics threshold

At sufficiently high transaction volumes, the per-transaction scheme fees paid through a BIN sponsor’s margin become more expensive than the direct scheme fees a principal member would pay. The crossover point varies by programme type, transaction mix and the sponsor’s fee structure, but for most European card programmes it falls somewhere in the range of several million transactions per year. Below that threshold, the overhead of principal membership – fee base, compliance resource, operational investment – is unlikely to be justified on economics alone.

The control and independence argument

Beyond economics, some businesses pursue principal membership for strategic reasons: full control over the scheme relationship, the ability to negotiate directly with Visa and Mastercard on programme terms, independence from a third party’s financial health in the settlement chain, and the credibility that direct membership confers in certain commercial contexts. These are legitimate reasons to pursue direct membership at a scale where the economics are marginal.

Planning the transition

Moving from affiliate to principal membership involves re-registering active card programmes with the scheme under the new principal’s BINs, which typically requires re-issuing physical cards to existing cardholders and updating card-on-file registrations. This is operationally significant and should be planned well in advance. A BIN sponsor who has helped clients through this transition – and who has an interest in supporting it rather than obstructing it – is a meaningfully better long-term partner than one who does not.

What to watch for

• Model the full cost of principal membership before deciding it is economically justified – include compliance resource, technology investment, scheme audit costs and the ongoing operational overhead, not just direct scheme fees.
• Discuss the transition pathway explicitly with your BIN sponsor before signing. A sponsor who actively supports and plans for eventual principal membership is a better long-term partner than one who treats it as a competitive threat.
• The timeline from deciding to pursue principal membership to live operation is typically 18 to 36 months. Factor this into your programme roadmap if you are building toward eventual direct membership.

DiPocket holds principal membership of both Visa and Mastercard and has supported fintechs, PSPs and non-financial businesses through every stage of the card programme journey – from affiliate launch to principal membership transition. Explore our BIN sponsorship service or read the full guide: BIN sponsorship explained.

A BIN sponsor provides the regulatory and scheme infrastructure that makes card issuance legally possible: principal membership of a card scheme, a licensed BIN, and accountability to Visa or Mastercard for scheme compliance. An issuer processor provides the technology infrastructure that makes transactions work in real time: authorisation, clearing, settlement messaging, card lifecycle management, and spend control enforcement. The two roles are structurally distinct and governed by separate contractual relationships – but they are frequently provided by the same entity, which has significant implications for programme flexibility and negotiating leverage.

On this page:

• What does a BIN sponsor do?
• What does an issuer processor do?
• Who is accountable for regulatory compliance in a card programme?
• What happens when one provider offers both roles?
• What is a programme manager, and how does it relate to these two roles?
• Can you switch issuer processor without changing BIN sponsor?
• Can you switch BIN sponsor without changing issuer processor?

Answer

A BIN sponsor provides the regulatory and scheme-level infrastructure that makes card issuance possible. Specifically: they hold principal membership of a card scheme, own or control the BINs used by client programmes, register client programmes as affiliate members of the scheme, bear accountability to Visa or Mastercard for compliance across all cards issued under their BINs, and provide the settlement infrastructure through which card transactions are cleared and funds move.

The regulatory dimension

A BIN sponsor must hold a regulatory licence – typically an Electronic Money Institution (EMI) licence or banking licence – issued by a recognised financial regulator. In Europe, this is a prerequisite for principal scheme membership and for operating any card issuance activity. The sponsor is the regulated entity in the programme: it is accountable to the regulator and to the card scheme for the conduct of all cards issued under its BINs, regardless of how many client programmes are running beneath it.

This is not a passive role. The sponsor must maintain active oversight of the compliance standards of all affiliated programmes, approve programme design and marketing materials, and ensure that AML and KYC standards are met consistently across all clients. A sponsor that takes a light-touch approach to these obligations is a compliance risk for client programmes – not just for itself.

The scheme dimension

The BIN sponsor’s scheme membership determines what the client programme can access: which networks (Visa, Mastercard or both), which geographies, which card product types, and which programme features. The sponsor negotiates directly with the schemes on fees, programme parameters, and product access. Clients benefit from the sponsor’s commercial relationships with the schemes but do not have a direct voice in those negotiations.

What to watch for

• Confirm the sponsor holds principal membership – not affiliate membership – of the relevant scheme. Only principal members can legitimately sponsor client programmes.
• Ask specifically about the sponsor’s oversight model: how do they monitor the compliance of client programmes on an ongoing basis? A sponsor with weak oversight processes creates scheme compliance exposure for all programmes under its BINs.

Answer

An issuer processor provides the transaction technology infrastructure that connects the card programme to the scheme network and handles the real-time mechanics of every card transaction. This includes authorisation processing, clearing and settlement messaging, card lifecycle management (issuance, activation, blocking, replacement), spend control enforcement, and the data feeds that drive programme reporting and reconciliation.

The authorisation function

When a cardholder presents a card, the transaction request arrives at the issuer processor’s authorisation platform within milliseconds. The platform applies the programme’s configured rules – spend controls, fraud logic, account status checks – and returns an approval or decline to the card scheme’s network before the cardholder’s card reader has finished processing. The speed, reliability and configurability of this function directly determines the cardholder experience and the programme’s operational performance.

Card lifecycle and scheme connectivity

Beyond real-time authorisation, the issuer processor manages the full card lifecycle: issuing card numbers and PINs, managing tokenisation for mobile wallets (Apple Pay, Google Pay), processing card replacements and blocks, and handling dispute and chargeback workflows in line with scheme rules. They also maintain the technical connectivity to the scheme’s network infrastructure and are responsible for implementing scheme rule changes and technical updates as they are released by Visa and Mastercard.

Key European issuer processors

The European issuer processing market is served by a relatively small number of specialist providers. Thredd (formerly GPS) is one of the largest and most widely used. Others operating in this space include Marqeta, Nuvei, and various providers that have expanded into processing from adjacent positions in the payments stack. The processor a programme runs on matters commercially as well as technically – fee structures, transaction volume thresholds, and product capability vary materially between providers.

What to watch for

• Processor capability is programme-specific, not generic. A processor that works well for a high-volume consumer prepaid programme may not be the right fit for a low-volume B2B virtual card programme with complex spend control requirements. Evaluate fit for your specific use case.
• Ask about the processor’s scheme certification status. Processors must be certified by Visa and Mastercard to process on their networks, and certifications have scope limits. Confirm the processor is certified for the card types and geographies your programme requires.

Answer

The BIN sponsor – as the regulated entity and scheme principal member – holds ultimate accountability for regulatory compliance in a card programme. The issuer processor operates a compliant technical environment (PCI DSS, scheme technical rules) but regulatory accountability under frameworks such as PSD2 and AML legislation rests with the licensed entity, which is the sponsor.

The compliance division in practice

The regulatory compliance picture in a card programme involves three overlapping layers, and the distinction between them matters:

• Scheme compliance – adherence to Visa and Mastercard’s operating rules. Accountability sits with the principal member (the BIN sponsor). The processor supports this by implementing scheme rule updates in their technical platform, but the sponsor is accountable to the scheme.
• Regulatory compliance – adherence to financial regulation (PSD2, AML Directives, data protection). Accountability sits with the licensed entity – again the sponsor, as the EMI or bank. The processor is not regulated as a financial institution and does not carry this accountability.
• Technical compliance – PCI DSS and scheme technical standards for data security and transaction processing. This is primarily the processor’s domain: they operate the environment in which card data is handled and are responsible for maintaining the certifications that cover that environment.

A card programme therefore has two separately accountable compliance parties: the sponsor for regulatory and scheme-rule accountability, and the processor for technical security compliance. This distinction matters when reviewing programme agreements – the allocation of compliance obligations, indemnities, and incident response responsibilities should reflect this division explicitly.

What to watch for

• Do not assume that because a processor operates a PCI DSS-certified environment, the programme is fully covered from a regulatory compliance standpoint. PCI DSS is a data security standard, not a regulatory compliance framework.
• In the programme agreement with your BIN sponsor, check how compliance obligations are allocated between the sponsor, the processor and your own business. Ambiguity in this allocation creates risk that will only become visible when something goes wrong.

Answer

When a single provider acts as both BIN sponsor and issuer processor – often described as a fully integrated or turnkey card programme platform – the client has one commercial relationship, one contract, and one point of accountability. This simplifies launch and reduces integration complexity. The trade-off is reduced flexibility: switching either the sponsor or the processor relationship means switching both, because they are contractually and technically bundled.

The case for integrated providers

For most businesses launching their first card programme, an integrated provider offering both BIN sponsorship and issuer processing is a sensible starting point. The integration between the two functions is already built, scheme and regulatory compliance is coordinated by one team, and time to market is faster than assembling separate relationships. The operational burden of managing two vendor relationships is also reduced.

DiPocket provides both BIN sponsorship and processing infrastructure, working with multiple issuer processors – including Thredd – to give clients flexibility in their processing arrangement while maintaining a single point of accountability for scheme compliance and regulatory oversight.

The processor flexibility question

The critical question with any integrated provider is not whether they bundle both roles, but whether their processing arrangement is fixed or flexible. Some integrated providers are tied to a single processor: the BIN sponsorship and the processing are offered as a single indivisible product, and the client has no ability to use a different processor. Others, like DiPocket, operate with multiple processors and allow the processing component to be selected or changed based on the client’s requirements.

Processor lock-in has operational consequences that only become visible as a programme grows. If the bundled processor cannot support a new geography, a higher transaction volume, or a specific technical requirement, the client has no recourse short of migrating the entire programme to a new provider – including re-issuing cards to existing cardholders.

What to watch for

• When evaluating an integrated provider, ask explicitly: are the BIN sponsorship and processing components separable? Can you change the processor without changing the BIN sponsor? The answer to these questions determines your long-term flexibility.
• Ask which processors the sponsor works with and whether you can specify or influence the choice. A sponsor who works with multiple processors and is transparent about the options is materially better positioned to support a growing programme than one who cannot answer the question.

Answer

A programme manager is an entity that takes operational responsibility for running a card programme on behalf of the client – coordinating between the BIN sponsor, the issuer processor, the card bureau, and other service providers. A programme manager does not need to hold a regulatory licence or scheme membership themselves. They act as the operational layer above the infrastructure, not as part of it.

Where the programme manager sits

In a card programme with all roles separated, the structure typically looks like this: the BIN sponsor provides regulatory and scheme access; the issuer processor handles transaction technology; and the programme manager coordinates the operational delivery – onboarding, card management, dispute handling, reporting, and day-to-day scheme rule compliance on behalf of the client. The client sits above all of these.

In an integrated provider model, the sponsor often also acts as the programme manager, handling operational coordination as part of the service. This is the model DiPocket operates: the BIN sponsorship, operational oversight, and programme support functions are provided by the same entity.

Why the distinction matters

Some providers in the market describe themselves as programme managers or card programme platforms without being the BIN sponsor themselves – they are sitting above a sponsor and a processor without holding the scheme membership or regulatory licence that underpins the whole arrangement. This creates a longer chain of dependency and an additional potential failure point. If the provider’s relationship with the underlying sponsor breaks down, every programme running on the platform is affected.

What to watch for

• If a provider describes themselves as a programme manager, ask directly: who is the BIN sponsor, and do they hold principal scheme membership? The answer tells you where the regulatory and scheme accountability actually sits.
• The longer the chain between your programme and the regulated entity, the more dependency risk you carry. Ideally the BIN sponsor, the regulatory licence holder, and the scheme principal member are the same entity.

Answer

In principle yes, but in practice it depends entirely on the contractual and technical architecture of your current arrangement. If the BIN sponsor and issuer processor are separate providers with separate agreements, processor migration is technically possible without changing the sponsor relationship. If the two are contractually bundled, changing the processor means changing the sponsor – and everything that entails.

What processor migration actually involves

Even where processor and sponsor relationships are technically separable, migrating an issuer processor is a significant technical project. The new processor needs to be integrated with the sponsor’s settlement infrastructure, scheme registrations need to be updated to reflect the new processor, and the card programme’s transaction processing logic needs to be re-implemented and tested on the new platform. Active cardholders are typically not affected – card numbers and PANs do not change when a processor changes, because the PAN is associated with the BIN and the account, not with the processor.

When processor migration is worth considering

Processor migration becomes relevant when the current processor cannot support a new requirement – a new geography, a higher transaction volume tier, a specific spend control feature, or better pricing at scale. It is also relevant when a programme migrates to a new BIN sponsor who uses a different processor. In either case, the commercial benefits need to outweigh the migration cost and operational disruption, which is non-trivial for active programmes.

What to watch for

• Before signing with any BIN sponsor, confirm in writing whether you have the contractual right to change issuer processor independently of the sponsor relationship. If the agreement is silent or ambiguous on this point, assume it is not permitted.
• Processor migration for an active programme with cardholders takes months, not weeks. If your programme is growing and you anticipate needing to change processor, plan the migration well before the need becomes urgent.

Answer

Switching BIN sponsor is operationally more disruptive than switching issuer processor. A sponsor change typically requires re-registration of the programme with the card scheme under the new sponsor’s BINs, which means issuing new card numbers to existing cardholders – because the BIN prefix changes. This is the most operationally significant aspect of any programme migration.

What a sponsor migration actually involves

When a programme moves to a new BIN sponsor, the cards in existing cardholders’ hands carry the old sponsor’s BIN. Those cards cannot simply be reassigned to a new BIN – the card number incorporates the BIN prefix and cannot be changed without physical or virtual card replacement. This means all active cardholders need to be re-issued new cards, all card-on-file registrations (subscriptions, saved payment methods) need to be updated, and the programme needs to operate on both old and new BINs simultaneously during a transition period.

This is the most frequently cited reason why businesses stay with a sub-optimal BIN sponsor longer than they should – the cost and complexity of migration is significant, and underestimated at the time the original sponsor relationship was established.

Whether the existing processor can be retained

In some cases, the new BIN sponsor will work with the same issuer processor as the old one, allowing the programme to migrate the sponsor relationship without also migrating the processing infrastructure. Whether this is possible depends on the new sponsor’s processing relationships and the technical architecture of the existing programme. Where it is possible, it materially reduces migration complexity.

What to watch for

• When selecting a BIN sponsor, think explicitly about the migration scenario. How would you exit this relationship if needed, and what would the cardholder impact be? A sponsor who has managed client migrations – and who can describe how they approach them – understands the risk they are asking you to accept.
• Build a cardholder re-issuance cost estimate into any programme migration business case. For programmes with tens of thousands of active cardholders, card replacement logistics alone represent a material cost and operational project.

Answer

The core questions to ask a provider that offers both BIN sponsorship and issuer processing are: whether the two components are contractually separable, which processors they work with and whether you can specify or change the processor, what their authorisation performance and uptime data looks like, how they handle a client that needs to migrate to a different processor or direct scheme membership, and what their financial standing and regulatory compliance track record is.

The separation question

Ask directly: if I need to change processors in two years because my volume has grown or my requirements have changed, can I do that without changing BIN sponsor? A provider who cannot answer this question clearly, or who answers it with a commercial deflection rather than a structural explanation, is signalling that the two components are effectively locked together.

Performance and stability

For the processing component, ask for authorisation uptime SLA data and historical authorisation rate performance across programmes comparable to yours. Uptime SLAs below 99.9% for the authorisation platform are a concern for any programme where card acceptance reliability matters to the cardholder experience. Authorisation rate performance tells you how effectively the platform converts legitimate transaction attempts into approvals.

For the sponsorship component, ask about the provider’s financial standing, regulatory audit history, and how they have handled compliance incidents or scheme rule changes across their client portfolio. A sponsor who has been operating for a decade and has navigated multiple regulatory changes is materially more credible than one who cannot speak to their history.

BIN sponsor vs issuer processor: roles at a glance

What to watch for

• Ask for the provider’s authorisation uptime SLA in writing, and ask for historical performance data. Claims of high uptime without supporting data should not be taken on trust for a function this operationally critical.
• Ask how the provider has handled clients that outgrew the bundled arrangement and needed to move to direct scheme membership or a different processor. Their answer tells you whether they see themselves as a long-term partner or a fixed-term infrastructure contract.

DiPocket provides BIN sponsorship with processor flexibility – working with multiple issuer processors including Thredd so that clients are not locked into a single processing arrangement as their programme grows. Explore our BIN sponsorship service.

A Bank Identification Number (BIN) is the first six to eight digits of a payment card number. These digits identify the institution that issued the card and determine how the transaction is routed through the card scheme network. In payment card issuing, the BIN is the foundational identifier that connects every card transaction back to the issuing institution – and in BIN sponsorship arrangements, back to the regulated entity that holds scheme membership on the client’s behalf.

On this page:

• What does BIN stand for, and is it the same as IIN?
• How many digits is a BIN, and why did it change from six to eight?
• What information does a BIN contain?
• How does a BIN work during a payment card transaction?
• Who assigns and owns a BIN?
• What is the difference between a shared BIN and a dedicated BIN?
• How does a BIN relate to BIN sponsorship?
• What is a BIN range?

Answer

BIN stands for Bank Identification Number. IIN stands for Issuer Identification Number. They refer to the same digits on a payment card. BIN is the older and more widely used term; IIN is the technically correct modern term.

Why the terminology changed

The term BIN dates from an era when only banks issued payment cards. As non-bank entities – including fintechs, electronic money institutions and payment service providers – began issuing cards under their own brands, the term Bank Identification Number became a misnomer. ISO updated its standard (ISO/IEC 7812) to use Issuer Identification Number as the official term, reflecting the reality that the issuing institution is not always a bank.

In practice, the industry continues to use BIN almost universally. Both terms appear in scheme documentation, processor agreements and commercial conversations. For fintechs and PSPs working with a BIN sponsor in Europe, the sponsor is the regulated issuer whose BIN appears on the cards – whether that sponsor is a bank or, as is common in the EU, an authorised electronic money institution.

What to watch for

• Agreements and scheme documentation may use BIN and IIN interchangeably – treat them as the same thing.
• Some processors use IIN in their technical documentation even when the commercial term used is BIN.

Answer

A BIN is six to eight digits. The expansion from six to eight digits was mandated by Visa and Mastercard in April 2022 in response to a projected shortage of available six-digit combinations caused by the rapid growth in the number of payment card-issuing institutions globally.

Why the expansion happened

Six-digit BINs support a finite number of unique combinations. As the number of card-issuing institutions grew, driven in part by the expansion of fintech payment card issuing under BIN sponsorship arrangements, ISO projected that the supply of available six-digit BINs would be exhausted. ISO/IEC 7812-1 was revised in 2017 to extend the standard from six to eight digits, and Visa and Mastercard required all acquirers and processors to accommodate eight-digit BINs by April 2022.

An eight-digit BIN creates a sufficiently large namespace to accommodate continued issuance growth well into the future. The expansion did not change card numbers themselves, as PANs remained the same total length. Only the portion classified as the BIN grew.

What this means in practice for payment card programmes

All new BINs assigned by Visa and Mastercard since April 2022 are eight digits. Existing six-digit BINs continued in use during a transition period. For a business launching a new card programme today, its BIN will be eight digits.

What to watch for

• If you are migrating an existing payment card programme, confirm whether your current BIN is six or eight digits.
• The expansion of the BIN did not change the total length of the Primary Account Number (PAN) – the card number itself remains the same length.

Answer

A BIN identifies the payment card scheme (Visa, Mastercard and so on), the issuing institution, the card type (credit, debit, prepaid), and in some cases the country of issuance and card product level. It does not contain any personal data about the cardholder.

Breaking down what the digits tell you

The first digit of a BIN is called the Major Industry Identifier (MII). It identifies the broad category of the issuing institution. For payment cards, Visa cards typically start with 4 and Mastercard cards with 5 (or 2 for newer Mastercard ranges). The remaining digits identify the specific issuing institution and, within that, the card product type.

For a fintech or PSP operating under BIN sponsorship, the BIN identifies the sponsor – the regulated EMI or bank that holds scheme membership – not the client business whose brand appears on the card. This is an important distinction: the cardholder’s card carries the client’s brand, but the BIN resolves to the sponsor.

What a BIN does not reveal

A BIN does not contain or expose any cardholder personal data. It does not identify the individual account, the cardholder’s name, their account balance, or any transaction history. It identifies the institution and the card product type only. The individual account is identified by the digits that follow the BIN within the full PAN.

In a BIN sponsorship arrangement, the authorisation of every card transaction flows through the sponsor’s infrastructure, not directly through the client’s systems. The sponsor’s authorisation platform handles real-time approval decisions, applies programme-level spend controls, and passes settlement data back to the client. Understanding this is material to programme design, performance expectations, and risk allocation.

Where the sponsor sits in the authorisation chain

When a cardholder presents a card, the transaction is routed to the issuing institution identified by the BIN – which in a sponsored programme is the sponsor, not the client. The sponsor’s authorisation platform applies the card’s spend rules, fraud logic and account status checks before returning an approval or decline. The client’s brand is on the card, but the sponsor’s infrastructure is making the authorisation decision.

This is why the sponsor’s authorisation infrastructure – its uptime, its authorisation rate performance, its real-time fraud capability – should be treated as a core evaluation criterion, not a technical detail. A sponsor with weak infrastructure will generate avoidable declines and cardholder friction regardless of how well the programme is designed.

What to watch for

• Ask your prospective sponsor for their authorisation uptime SLA and historical authorisation rate data across programmes similar to yours. These are material commercial metrics, not technical footnotes.
• Understand which spend control parameters are configurable by you in real time versus those that require a change request to the sponsor. Real-time configurability matters for programmes with dynamic or recipient-specific rules.
• Ask whether the sponsor operates their own authorisation platform or relies on a third-party processor for authorisation decisions. Each additional intermediary is a potential point of latency or failure.
• Spend controls configured at programme level – such as merchant category restrictions or per-transaction limits – are applied during the authorisation step by the issuing institution. Understanding where these controls are applied is important when designing your card programme.
• Transaction decline rates and authorisation performance depend on the sponsor’s processing infrastructure as well as the card scheme’s network. Ask about authorisation rates and uptime guarantees when evaluating a BIN sponsor.

Answer

In a BIN sponsorship arrangement, the authorisation of every payment card transaction flows through the sponsor’s infrastructure, not directly through the client’s systems. The sponsor’s authorisation platform handles real-time approval decisions, applies programme-level spend controls, and passes settlement data back to the client. Understanding this is material to programme design, performance expectations, and risk allocation.

Where the sponsor sits in the authorisation chain

When a cardholder presents a card, the transaction is routed to the issuing institution identified by the BIN – which in a sponsored programme is the sponsor, not the client. The sponsor’s authorisation platform applies the card’s spend rules, fraud logic and account status checks before returning an approval or decline. The client’s brand is on the payment card, but the sponsor’s infrastructure is making the authorisation decision.

This is why the sponsor’s authorisation infrastructure – its uptime, its authorisation rate performance, its real-time fraud capability – should be treated as a core evaluation criterion, not a technical detail. A sponsor with weak infrastructure will generate avoidable declines and cardholder friction regardless of how well the programme is designed.

Where spend controls are applied

Spend controls – merchant category restrictions, per-transaction limits, geography locks, time-of-day rules – are configured at programme level and applied by the sponsor’s platform during the authorisation step. If a transaction does not match the configured rules, it is declined at authorisation before it reaches settlement. This means the reliability and granularity of the sponsor’s spend control capability directly determines how precisely you can govern cardholder behaviour in real time.

What to watch for

• Ask your prospective sponsor for their authorisation uptime SLA and historical authorisation rate data across programmes similar to yours. These are material commercial metrics, not technical footnotes.
• Understand which spend control parameters are configurable by you in real time versus those that require a change request to the sponsor. Real-time configurability matters for programmes with dynamic or recipient-specific rules.

Ask whether the sponsor operates their own authorisation platform or relies on a third-party processor for authorisation decisions. Each additional intermediary is a potential point of latency or failure.

Answer

BINs are assigned by the payment card schemes – Visa and Mastercard – to regulated issuing institutions that hold principal membership of the scheme. A BIN is the property of the scheme and the issuing institution. A fintech or PSP operating under BIN sponsorship does not own or hold a BIN directly; they operate within a BIN or BIN range assigned to their sponsor.

How BINs are assigned in practice

When a regulated institution such as an Electronic Money Institution becomes a principal member of Visa or Mastercard, it applies to the scheme for one or more BINs. The scheme assigns BINs based on the institution’s programme requirements, card types and geographies. The institution then owns those BINs for the purposes of card issuance.

Under BIN sponsorship, the sponsor allocates a BIN or a BIN range to the client programme. The sponsor retains ownership and scheme-level accountability for the BIN. The client operates within the parameters set by the sponsor and the scheme.

Who holds the BIN in the EU

In the EU, BINs are held by institutions authorised to issue electronic money – typically Electronic Money Institutions (EMIs) or banks with scheme principal membership. The Bank of Lithuania and the FCA are the two primary regulatory authorities licensing EMIs in the EU and UK respectively. DiPocket holds BINs under its principal membership of both Visa and Mastercard, enabling it to sponsor programmes across 15 European markets.

What to watch for

• If you are evaluating a BIN sponsor, confirm that the BINs they are offering are registered in their name with the scheme – not sub-leased from another institution. Each layer of intermediary adds complexity and potential risk.
• The scheme’s own records are the authoritative source on BIN ownership. A legitimate sponsor will be transparent about their BIN holdings and scheme membership status.

Answer

A shared BIN is one where multiple client programmes operate within the same BIN, distinguished by sub-ranges within the full card number. A dedicated BIN is one assigned exclusively to a single programme. Dedicated BINs offer greater control and isolation; shared BINs are faster and lower cost to access, particularly at launch.

Shared BINs

Under a shared BIN arrangement, multiple clients of the same sponsor operate using sub-ranges within a single BIN. The full card number (PAN) is unique to each card and each account, so there is no risk of account collision. However, the BIN itself resolves to the sponsor and is shared with other programmes.

The main practical risk of a shared BIN is that the conduct of other programmes sharing the same BIN can affect your programme. If another programme on the same BIN has elevated fraud rates, some merchants or acquirers may block the BIN entirely, which would affect all programmes using it. This is rare but has occurred.

Dedicated BINs

A dedicated BIN is assigned exclusively to one programme. It offers complete isolation from other programmes, full control over the BIN’s reputation, and the ability to configure scheme-level settings without affecting other clients. Dedicated BINs are standard for larger or more established programmes.

Dedicated BINs require a direct scheme registration and typically involve higher fees and longer setup timelines than shared BINs. For a business launching a card programme for the first time, starting on a shared BIN and migrating to a dedicated BIN as the programme grows is a common and sensible path.

Shared BIN vs dedicated BIN: how they compare

What to watch for

• Ask your BIN sponsor how they screen other programmes sharing a BIN and what their fraud monitoring capability is across shared BIN clients.
• If you are considering a shared BIN arrangement, ask specifically which other types of programme share your BIN – a BIN shared with high-risk card products carries more exposure than one shared with low-risk corporate card programmes.
• Migrating from a shared to a dedicated BIN later involves re-issuing cards to existing cardholders. Factor this into your programme roadmap if you expect to grow into a dedicated BIN.

Answer

BIN sponsorship is the arrangement that allows a business to issue payment cards using a BIN it does not own. The sponsor – a regulated institution with scheme principal membership – grants the client access to its BIN, takes on scheme-level compliance responsibility, and enables the client to issue cards without holding direct scheme membership itself.

The BIN is the technical foundation of the sponsorship arrangement. Without a BIN, no card can be issued. Without a scheme member willing to sponsor access to that BIN, a business without principal membership cannot issue cards at all. BIN sponsorship is the commercial and regulatory mechanism that bridges those two realities.

For a full explanation of how BIN sponsorship works, who uses it, and what to look for in a provider, see the guide: BIN sponsorship explained: the complete guide for fintechs and PSPs.

Answer

A BIN range is a subset of a full BIN, defining the specific sequence of card numbers that a programme can issue. A single eight-digit BIN can support up to ten million unique card numbers; a BIN range allocates a portion of that capacity to a specific programme or client.

How BIN ranges work in practice

When a BIN sponsor assigns capacity to a client programme, they typically allocate a BIN range rather than the full BIN. The BIN range defines the starting and ending card numbers within which the programme can issue cards. All card numbers within that range share the same BIN prefix and are identifiable as belonging to the same programme.

BIN ranges are particularly relevant under shared BIN arrangements, where the sponsor’s BIN is divided into ranges for multiple client programmes. Under a dedicated BIN arrangement, the entire BIN’s range is available to one programme, though it may be sub-divided further by card product type.

What to watch for

• When assessing capacity for your programme, ask your sponsor how large the BIN range allocated to you is and whether it can be extended if your programme grows.
• A BIN range that is too small for your projected cardholder base will require a range extension or BIN migration – both of which involve operational work. Agree expected cardholder volumes upfront.